The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6681-2 advisory.

    Wenqing Liu discovered that the f2fs file system implementation in the Linux kernel did not properly     validate inode types while performing garbage collection. An attacker could use this to construct a     malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash).
    (CVE-2021-44879)

    It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly     handle certain error conditions during device registration. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2023-22995)

    Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading     to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash)     or possibly execute arbitrary code. (CVE-2023-4244)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the     Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some     situations. A local attacker could use this to possibly expose sensitive information (kernel memory).
    (CVE-2024-0340)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6681-4 advisory.

    Wenqing Liu discovered that the f2fs file system implementation in the Linux kernel did not properly     validate inode types while performing garbage collection. An attacker could use this to construct a     malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash).
    (CVE-2021-44879)

    It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly     handle certain error conditions during device registration. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2023-22995)

    Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading     to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash)     or possibly execute arbitrary code. (CVE-2023-4244)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the     Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some     situations. A local attacker could use this to possibly expose sensitive information (kernel memory).
    (CVE-2024-0340)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3711 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3711-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     January 11, 2024                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-5.10     Version        : 5.10.205-2~deb10u1     CVE ID         : CVE-2021-44879 CVE-2023-5178 CVE-2023-5197 CVE-2023-5717                      CVE-2023-6121 CVE-2023-6531 CVE-2023-6817 CVE-2023-6931                      CVE-2023-6932 CVE-2023-25775 CVE-2023-34324 CVE-2023-35827                      CVE-2023-45863 CVE-2023-46813 CVE-2023-46862 CVE-2023-51780                      CVE-2023-51781 CVE-2023-51782     Debian Bug     : 1032104 1035587 1052304

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    CVE-2021-44879

        Wenqing Liu reported a NULL pointer dereference in the f2fs         implementation. An attacker able to mount a specially crafted image         can take advantage of this flaw for denial of service.

    CVE-2023-5178

        Alon Zahavi reported a use-after-free flaw in the NVMe-oF/TCP         subsystem in the queue initialization setup, which may result in         denial of service or privilege escalation.

    CVE-2023-5197

        Kevin Rich discovered a use-after-free flaw in the netfilter         subsystem which may result in denial of service or privilege         escalation for a user with the CAP_NET_ADMIN capability in any user         or network namespace.

    CVE-2023-5717

        Budimir Markovic reported a heap out-of-bounds write vulnerability         in the Linux kernel's Performance Events system caused by improper         handling of event groups, which may result in denial of service or         privilege escalation. The default settings in Debian prevent         exploitation unless more permissive settings have been applied in         the kernel.perf_event_paranoid sysctl.

    CVE-2023-6121

        Alon Zahavi reported an out-of-bounds read vulnerability in the         NVMe-oF/TCP which may result in an information leak.

    CVE-2023-6531

        Jann Horn discovered a use-after-free flaw due to a race condition         when the unix garbage collector's deletion of a SKB races         with unix_stream_read_generic() on the socket that the SKB is         queued on.

    CVE-2023-6817

        Xingyuan Mo discovered that a use-after-free in Netfilter's         implementation of PIPAPO (PIle PAcket POlicies) may result in denial         of service or potential local privilege escalation for a user with         the CAP_NET_ADMIN capability in any user or network namespace.

    CVE-2023-6931

        Budimir Markovic reported a heap out-of-bounds write vulnerability         in the Linux kernel's Performance Events system which may result in         denial of service or privilege escalation. The default settings in         Debian prevent exploitation unless more permissive settings have         been applied in the kernel.perf_event_paranoid sysctl.

    CVE-2023-6932

        A use-after-free vulnerability in the IPv4 IGMP implementation may         result in denial of service or privilege escalation.

    CVE-2023-25775

        Ivan D Barrera, Christopher Bednarz, Mustafa Ismail and Shiraz         Saleem discovered that improper access control in the Intel Ethernet         Controller RDMA driver may result in privilege escalation.

    CVE-2023-34324

        Marek Marczykowski-Gorecki reported a possible deadlock in the Xen         guests event channel code which may allow a malicious guest         administrator to cause a denial of service.

    CVE-2023-35827

        Zheng Wang reported a use-after-free flaw in the Renesas Ethernet         AVB support driver.

    CVE-2023-45863

        A race condition in library routines for handling generic kernel         objects may result in an out-of-bounds write in the         fill_kobj_path() function.

    CVE-2023-46813

        Tom Dohrmann reported that a race condition in the Secure Encrypted         Virtualization (SEV) implementation when accessing MMIO registers         may allow a local attacker in a SEV guest VM to cause a denial of         service or potentially execute arbitrary code.

    CVE-2023-46862

        It was discovered that a race condition in the io_uring         subsystem may result in a NULL pointer dereference, causing a         denial of service.

    CVE-2023-51780

        It was discovered that a race condition in the ATM (Asynchronous         Transfer Mode) subsystem may lead to a use-after-free.

    CVE-2023-51781

        It was discovered that a race condition in the Appletalk subsystem         may lead to a use-after-free.

    CVE-2023-51782

        It was discovered that a race condition in the Amateur Radio X.25         PLP (Rose) support may lead to a use-after-free. This module is not         auto-loaded on Debian systems, so this issue only affects systems         where it is explicitly loaded.

    For Debian 10 buster, these problems have been fixed in version     5.10.205-2~deb10u1.  This update additionally fixes Debian bugs     #1032104, #1035587, and #1052304; and includes many more bug fixes     from stable updates 5.10.198-5.10.205 inclusive.

    We recommend that you upgrade your linux-5.10 packages.

    For the detailed security status of linux-5.10 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-5.10

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6639-1 advisory.

    It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the     Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780)

    It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel,     leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-51781)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    Jann Horn discovered that a race condition existed in the Linux kernel when handling io_uring over     sockets, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-6531)

    Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did not properly handle dynset     expressions passed from userspace, leading to a null pointer dereference vulnerability. A local attacker     could use this to cause a denial of service (system crash). (CVE-2023-6622)

    It was discovered that the IGMP protocol implementation in the Linux kernel contained a race condition,     leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-6932)

    Robert Morris discovered that the CIFS network file system implementation in the Linux kernel did not     properly validate certain server commands fields, leading to an out-of-bounds read vulnerability. An     attacker could use this to cause a denial of service (system crash) or possibly expose sensitive     information. (CVE-2024-0565)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Jann Horn discovered that the TLS subsystem in the Linux kernel did not properly handle spliced messages,     leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2024-0646)

    Yang Chaoming discovered that the KSMBD implementation in the Linux kernel did not properly validate     request buffer sizes, leading to an out-of-bounds read vulnerability. An attacker could use this to cause     a denial of service (system crash) or possibly expose sensitive information. (CVE-2024-22705)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0474-1 advisory.

    The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been     exploited to achieve local privilege escalation (bsc#1219434).
    - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race     condition (bsc#1218730).
    - CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment     (bsc#1218836).
    - CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412).
    - CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
    - CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
    - CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
    - CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code     inside the brcm80211 component (bsc#1216702).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalation (bsc#1215275).
    - CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a     driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120).
    - CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user     to cause an information leak problem while freeing the old quota file names before a potential failure     (bsc#1219053).
    - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in     fs/smb/client/smb2ops.c (bsc#1218832).
    - CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804).
    - CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of     a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function     (bsc#1218752).
    - CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race     condition (bsc#1218757).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6705-1 advisory.

    It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly     handle certain error conditions during device registration. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2023-22995)

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    It was discovered that a race condition existed in the Cypress touchscreen driver in the Linux kernel     during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could     use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4134)

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that the io_uring subsystem in the Linux kernel contained a race condition, leading to a     null pointer dereference vulnerability. A local attacker could use this to cause a denial of service     (system crash). (CVE-2023-46862)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some     situations. A local attacker could use this to possibly expose sensitive information (kernel memory).
    (CVE-2024-0340)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
191795	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6681-2)	Nessus	Ubuntu Local Security Checks	3/11/2024	8/27/2024	high
192290	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6681-4)	Nessus	Ubuntu Local Security Checks	3/20/2024	8/27/2024	high
189090	Debian dla-3711 : linux-config-5.10 - security update	Nessus	Debian Local Security Checks	1/16/2024	1/22/2025	critical
190559	Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6639-1)	Nessus	Ubuntu Local Security Checks	2/15/2024	8/27/2024	high
190646	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:0474-1)	Nessus	SuSE Local Security Checks	2/17/2024	6/25/2026	high
192311	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6705-1)	Nessus	Ubuntu Local Security Checks	3/20/2024	8/27/2024	high

Detections

Analytics

Plugins Search

high

high

critical

high

high

high